About this role
Job Description:
The Enabling Services SR Security Architect is responsible for defining, governing, and evolving security standards and reference architectures across Enabling Services, aligned with the Mars Cybersecurity Framework.
This role ensures a consistent, risk-based, and secure-by-design approach across cloud, network, data protection, SRE, and infrastructure domains, enabling secure digital transformation and regulatory compliance.
Key Responsibilities:
1. Security Governance & Strategy
• Define and maintain security standards, policies, and guardrails.
• Establish governance models (roles, responsibilities, accountability).
• Align cloud, network, and SRE security with enterprise risk management.
• Ensure compliance with regulatory and industry frameworks.
2. Risk & Asset Management
• Define standards for asset inventory, data classification, and Zero Trust architecture.
• Lead threat modeling and risk assessments.
• Establish risk identification, prioritization, and third-party risk practices.
3. Security Architecture
• Design and govern secure reference architectures across:
• Cloud, network, and infrastructure
• IAM, encryption, and key management
• Define baseline security controls (multi-cloud, hybrid environments).
• Enforce principles such as least privilege, defense-in-depth, and zero trust.
4. Monitoring & Detection
• Define requirements for logging, monitoring, and SIEM integration.
• Establish standards for log collection, retention, and threat detection use cases.
• Promote adoption of cloud-native observability and security tools.
5. Incident Response & Resilience
• Define incident response frameworks and playbooks in collaboration with SecOps.
• Ensure integration with SOC/SOAR capabilities.
• Support recovery and resilience strategies.
6. Security Assurance & Compliance
• Define and enforce security control frameworks and baselines.
• Support audits and compliance assessments.
• Enable continuous compliance monitoring.
7. DevSecOps & Automation
• Embed security into CI/CD pipelines (SAST, DAST, SCA).
• Promote Infrastructure-as-Code (IaC) security and policy-as-code.
• Drive security automation and standardized controls.
Key Deliverables
• Security standards and policies
• Reference architectures and guardrails
• Cloud and infrastructure security baselines
• Control frameworks and mappings (e.g., NIST CSF)
• Risk assessment frameworks
Skills & Expertise
• Cloud (AWS, Azure, GCP), Network Security, Infrastructure, Backup & DR
• Observability (Azure Monitor, Datadog), SIEM/SOAR
• NIST CSF, NIST 800-53, CIS, ISO 27001
• DevSecOps, IaC, automation, and SRE practices
• Strategic thinking and strong architecture mindset
• Stakeholder management and communication
• Ability to translate risk into actionable standards
#TBdigital #hybrid